security for the teststats view